VAPT Intern, Cybersecurity
Com Olho
About the Role
Com Olho is looking for a passionate and technically skilled VAPT Intern to join our cybersecurity team. The candidate will gain hands-on experience in identifying, analyzing, validating, and reporting security vulnerabilities across web applications, APIs, networks, and infrastructure.
Key Responsibilities
- Conduct Vulnerability Assessment and Penetration Testing (VAPT) on web applications, APIs, and infrastructure.
- Identify and validate security vulnerabilities based on OWASP Top 10 and industry best practices.
- Perform manual security testing using Burp Suite, Nmap, Nuclei, and other security tools.
- Analyze vulnerabilities, assess their impact, and prepare technical reports with proof of concept (PoC) and remediation recommendations.
- Assist in vulnerability revalidation and remediation verification.
- Research emerging vulnerabilities, attack techniques, and cybersecurity threats.
- Collaborate with internal security teams and researchers on security assessments.
Requirements & Tech Stack
- Basic understanding of web application security, networking, HTTP/HTTPS, and REST APIs.
- Familiarity with OWASP Top 10 and common vulnerabilities such as SQL Injection, XSS, IDOR, SSRF, and authentication bypass.
- Hands-on exposure to Burp Suite, Nmap, or similar security testing tools.
- Basic knowledge of Linux, Python, or Bash scripting.
- Strong analytical, problem-solving, and documentation skills.
Qualifications
- Pursuing or completed B.Tech/B.E./BCA/MCA or equivalent degree in Computer Science, IT, or Cybersecurity.
- Participation in CTF competitions, bug bounty programs, or security research.
- Relevant cybersecurity certifications or practical projects will be an added advantage.
What You'll Gain
- Hands-on experience in real-world cybersecurity assessments.
- Exposure to enterprise applications, APIs, and infrastructure security.
- Opportunities to work with experienced security professionals and researchers.
- Practical experience in offensive security, vulnerability reporting, and remediation validation.






